Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer
File:                     9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer (raw, json)
Hash identifier:          Ii4/MhE5ar4LVw2foF0SX3IDkH4f6doCzW/zx6nLyVY=
Subject key identifier:   33:31:3E:A7:53:B7:F2:38:1E:E1:C7:1A:96:53:45:25:49:78:CF:A5
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858453045B5F9DCD4D8FB8A318630
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 13 Mar 2024 00:45:20 +0000
Certificate not after:    Tue 16 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 394485
                          IP: 185.212.72.0 -- 185.212.74.255
                          IP: 206.130.228.0/24
                          IP: 2620:122:a000::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:45:b5:f9:dc:d4:d8:fb:8a:31:86:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar 13 00:45:20 2024 GMT
            Not After : Jun 16 00:45:20 2026 GMT
        Subject: CN=9b8e9198-44df-424d-bfd4-9a91c9fbc7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:26:47:b2:7b:b1:f1:b0:b8:6e:df:6d:2b:ef:
                    70:05:d4:54:d7:f1:13:a6:41:79:19:d6:d4:c3:31:
                    ca:95:34:c2:ab:d4:74:69:58:f3:4b:37:2e:96:eb:
                    c8:9e:0a:83:65:dc:04:ba:21:59:58:fb:69:c4:7c:
                    b9:73:ac:51:00:1a:80:93:c5:8a:ea:f2:fe:19:1d:
                    56:72:1c:c5:67:88:b6:77:17:bb:f8:2d:8f:29:4c:
                    38:a9:7c:82:db:41:df:82:54:26:99:aa:c5:db:1f:
                    f0:01:93:55:31:78:b5:af:25:01:97:9b:aa:2f:61:
                    cf:84:32:fb:79:7e:52:ca:d6:c0:17:da:9e:c5:84:
                    4d:af:25:85:10:b2:f1:45:37:96:a4:7b:73:77:88:
                    00:ab:e6:a9:8f:cf:f2:63:37:cd:dd:ea:8b:a3:df:
                    fa:2f:f6:c1:15:0f:9d:02:c5:e8:60:67:e8:53:15:
                    5a:7b:9c:ac:07:72:39:69:48:7b:f2:8b:9b:2a:a0:
                    51:2b:47:10:60:bc:43:fa:c1:0b:bd:3a:c2:d6:f2:
                    3c:5e:9e:0d:d6:24:7a:47:60:3b:b2:54:a2:c1:dc:
                    b7:b5:03:90:2f:d0:8b:db:bd:1d:22:e1:7e:94:25:
                    a7:e8:3c:94:9c:01:57:0d:a9:ab:3e:86:f7:9d:e0:
                    36:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:31:3E:A7:53:B7:F2:38:1E:E1:C7:1A:96:53:45:25:49:78:CF:A5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.72.0-185.212.74.255
                  206.130.228.0/24
                IPv6:
                  2620:122:a000::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394485

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:06:c1:fa:d7:41:4d:5c:2d:fa:10:1a:82:a2:f5:9e:e0:47:
         ad:28:f0:c4:64:93:5c:ac:d1:11:a2:9e:f4:6c:3d:98:52:90:
         a3:78:8b:d5:48:5f:a0:77:c9:b5:81:27:bb:54:82:ac:fb:56:
         12:f0:1f:96:6a:37:bc:c7:33:a5:00:6a:0a:b3:f0:01:70:f4:
         07:6a:43:49:02:e9:ec:4a:b1:55:49:67:eb:96:22:78:51:ca:
         2d:5b:83:57:f0:2e:f4:32:92:d1:f1:89:b6:cf:57:45:f9:dc:
         df:3c:5e:87:84:bd:d3:03:23:d2:eb:ec:6a:bf:60:51:01:30:
         1f:f1:88:f1:e0:e4:26:5d:bb:b9:4e:c8:f5:36:81:31:50:3a:
         7d:03:1f:d2:30:f1:90:3e:be:70:3b:51:58:92:74:c4:1e:49:
         16:c7:74:b9:64:81:0d:d0:fb:d8:61:6c:dc:9d:96:cd:7b:20:
         60:98:e6:91:53:6c:48:a1:ca:5a:a4:b9:b3:5c:f4:6b:4f:e3:
         04:c0:51:8f:42:61:45:68:3e:32:bb:90:da:43:fb:a7:66:fd:
         45:1e:1f:95:ee:17:6f:23:18:5e:67:b5:0f:ed:ab:6e:3b:dc:
         2a:5f:fd:44:8e:17:fb:07:95:54:c6:02:68:d2:3a:51:1e:4f:
         29:e7:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:58:06 2024 by rpki-client on console-fra.rpki-client.org